added user authentication so that everything is actually secure, even when people mess with the urls
Merge pull request #35 from ckelman/charlie

added user authentication so that everything is actually secure, even wh...